Dulwich 0.23.1 Before 1.2.8 Symlink Path Traversal Via Filter Branch Index Filter

Back www.vulncheck.com

Dulwich 0.23.1 Before 1.2.8 Symlink Path Traversal Via Filter Branch Index Filter

www.vulncheck.com • October 22, 2026

Share: View original

Dulwich 0.23.1 before 1.2.8 Symlink Path Traversal via filter_branch Index Filter

dulwich >= 0.23.1, = 0.23.1, < 1.2.8

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

GitHub Security Advisory (GHSA-5fqc-mrg8-w798)

Ready to get Started?

Vulnerability Prioritization Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.

Early Warning System Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities in Dulwich Affecting Path Traversal and File Write Recent advisories have disclosed multiple vulnerabilities in Dulwich versions prior to 1.2.8 and 1.2.9. The first vulnerability, identified as a symlink path traversal issue (CWE-22), affects Dulwich 0.23.1 before 1.2.8. The second vulnerability allows arbitrary file writes via DOS drive letter paths, impacting versions before 1.2.9. A third vulnerability, also a symlink issue, is present in Dulwich 0.24.0 before 1.2.8. These vulnerabilities could potentially allow unauthorized access to sensitive files or system manipulation. No has been reported at this time, but users are advised to prioritize patching their systems. The vulnerabilities have been cataloged under GitHub Security Advisories with specific identifiers for tracking. 43

Extracted Entities

CWE Weaknesses (1)

CWE-22 - Path Traversal

Platforms (1)

Vulnerabilities (1)